Impacket DumpNTLMInfo

Dump NTLM server information (OS version, domain, hostname) without credentials

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool

impacket-DumpNTLMInfo

Category

Enumeration / Network Discovery

Platform

linux

Requires

no credentials

Protocols

SMB

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

impacket-DumpNTLMInfo '<ip>'

Examples

impacket-DumpNTLMInfo 192.168.1.100

Tags

impacket ntlm fingerprint enumeration unauthenticated

Related commands

• Impacket RDP Check Check if credentials are valid for RDP access
• Impacket RPCDump Enumerate RPC endpoints and interfaces registered on a remote host
• NetExec RDP NLA Screenshot Capture a pre-auth RDP login screen against hosts that have NLA enabled. Reveals OS…
• Nmap TCP Scan Comprehensive TCP port scan with service version detection and default scripts